Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
References
Link | Resource |
---|---|
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00894.html | Patch Vendor Advisory |
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00894.html | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 07:53
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00894.html - Patch, Vendor Advisory |
30 Nov 2023, 16:39
Type | Values Removed | Values Added |
---|---|---|
First Time |
Intel
Intel server Information Retrieval Utility |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00894.html - Patch, Vendor Advisory | |
CWE | CWE-427 | |
CPE | cpe:2.3:a:intel:server_information_retrieval_utility:*:*:*:*:*:*:*:* |
14 Nov 2023, 19:30
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-11-14 19:15
Updated : 2024-11-21 07:53
NVD link : CVE-2023-27513
Mitre link : CVE-2023-27513
CVE.ORG link : CVE-2023-27513
JSON object : View
Products Affected
intel
- server_information_retrieval_utility
CWE
CWE-427
Uncontrolled Search Path Element